KYC vishing scam

केवाईसी वॉयस फ़िशिंग घोटाला

INDIA — By BharatSecure Threat Intelligence Team ·

Dangerous Risk: 10/10 Severity: Critical BharatSecure Threat Intelligence

Category: KYC

Evidence & AI transparency

Not yet assessed. This older record has not completed the new evidence-governance review.

This page includes AI-assisted analysis. AI assistance does not mean a person reviewed or approved this page.

Sources: 0 · Last automated validation: Not recorded

Evidence-backed facts: statements mapped to cited evidence by the automated validator. BharatSecure analysis: interpretation and safety guidance; it is not an official finding.

Automated analysis can contain errors. Confirm important information and decisions with official authorities.

Report an error or suggest a correction

Verdict Summary

KYC vishing scam is a confirmed scam. Do not engage — block the sender and report to 1930 (National Cyber Crime Helpline) immediately.

Risk score: 10/10 · Severity: Critical · Verdict: Dangerous

Scam Intelligence: KYC vishing scam

Proprietary signals from BharatSecure's scam-tracking database.

Last reportedAug 13, 2026
First documentedAug 13, 2026

How KYC vishing scam Works

  1. Fraudster calls the victim pretending to be from a bank, government agency, or service provider.
  2. Caller claims KYC must be updated to resolve a problem or avoid blocking.
  3. Victim is tricked into sharing OTPs, CVVs, PINs, passwords, or remote access.

How This Scam Works — Detailed Explanation

In the digital age, scammers are increasingly finding ways to approach victims through phone calls, often impersonating banks and government officials. They typically acquire personal data through social media platforms, online forums, or even through data breaches. This information allows them to create a facade of authenticity. For instance, they might call you claiming to be from the State Bank of India or the Reserve Bank of India, armed with your name, phone number, and even snippets of your account information gathered from previous data leaks. This initial contact is designed to instill a sense of trust, as victims believe they are speaking to legitimate representatives of an institution they know.

To hone in on their targets, scammers utilize well-crafted psychological tricks that play on urgency and fear. They often present a false scenario where the victim's account may be blocked unless immediate action is taken, such as updating KYC details. By applying pressure, such as saying that failure to comply could result in immediate freezing of their bank account, they shove the victim into a corner. The call is typically rife with terms that induce panic, making the victim think they are at risk of losing their money. During this high-stress interaction, the scammers may rely on fake manners, claiming to provide service and help, furthering the victim’s willingness to comply with their demands.

Once the victim is ensnared, the scam proceeds through a carefully orchestrated script. For example, a victim might receive a call supposedly from HDFC Bank, stating that there is an issue with their KYC compliance. The scammer demands the victim to share an OTP (One-Time Password) or PIN to 'verify' their identity. Some may even instruct victims to download remote access software under the guise of providing assistance. Tricking victims into sharing sensitive details is key here; the scammer will rush through the process so the victim has little time to think. By the time the scam is discovered, it is often too late, resulting in unauthorized transactions and real monetary losses.

The impact of KYC vishing scams in India cannot be underestimated. According to reports, there have been losses amounting to hundreds of crores; for instance, a recent statistic from the Ministry of Home Affairs highlighted a single takeaway that victims lost ₹2,500 crore over the last year due to various scams, with KYC fraud being a significant contributor. Organizations such as CERT-In and RBI have issued multiple advisories warning the public about these tactics, reflecting the critical nature of this escalating crime. Victims often find themselves in a financial quagmire, struggling to recover their lost funds, while their psychological well-being suffers due to the breach of trust and insecurity.

To differentiate between legitimate calls and scams, it is essential to pay attention to certain signs. Genuine representatives from banks or financial institutions will never ask for sensitive information over the phone, such as OTPs or passwords. Also, if someone is pressuring you to act immediately, it's a major red flag. Always verify their claims by calling back through official helplines of the bank. Just remember: if it feels off, it probably is. Scammers rely on your emotional responses to get what they want, making it crucial to stay calm and act rationally in such circumstances.

Who Does KYC vishing scam Target?

Bank customers, mobile subscribers, and digital payment users in India

Red Flags — How to Identify KYC vishing scam

  • Caller requests OTP or PIN
  • Unexpected call claiming to be from an institution
  • Pressure to act immediately

What To Do If You Encounter KYC vishing scam

  1. Report the incident immediately to the cybercrime helpline 1930 or visit cybercrime.gov.in.
  2. Contact your bank's customer service to report unauthorized transactions, using the SBI helpline at 1800-11-1109 or HDFC at 1800-202-6161.
  3. Change your online banking credentials and enable two-factor authentication for added security.
  4. Monitor your bank statements closely for any suspicious activity; report them to your bank without delay.
  5. Educate friends and family about this scam to raise awareness and prevent further incidents.
  6. Consider setting up alerts with your bank for large transactions.

How to Report KYC vishing scam in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a KYC scam?
Immediately contact your bank and report the incident. Use the SBI helpline at 1800-11-1109 or HDFC at 1800-202-6161. Additionally, report the scam at cybercrime.gov.in.
How can I identify a KYC vishing scam?
Look for signs such as requests for OTPs, pressure to act urgently, or unsolicited calls from unknown numbers posing as bank representatives.
How do I report this type of scam in India?
You can report KYC scams to the cybercrime helpline 1930, file a complaint at cybercrime.gov.in, and notify your bank about any fraudulent activity.
What are the recovery steps after falling victim to this scam?
Contact your bank to report the incident and initiate a fraud investigation. Change your passwords immediately and monitor your accounts closely.
🛡️

How This Scam Works — BharatSecure AI

Spreading fast

A plain-language breakdown based on 41 real reported scams of this type.

How they reach you Reported primary vectors are unsolicited SMS, email, and WhatsApp messages/calls impersonating banks, UPI providers, or government agencies (Aadhaar, PAN, UIDAI), claiming urgent KYC updates are requi
How they gain your trust Trust is established by impersonating trusted institutions using official-sounding language, references to real regulatory mandates (RBI KYC, PAN-Aadhaar linking), and lookalike domains, then reinforc
How they take your money Documented rails include UPI apps and wallets (Paytm, PhonePe), direct bank transfers via harvested OTP/PIN/CVV, remote-access driven account draining
Who they target Most commonly targeted are the elderly, homemakers, rural and first-time bank users (including Jan Dhan holders), plus job seekers, students, and small businesses. Urban professionals are targeted in
How they manipulate you
  • Authority bias (impersonating banks, police, government officials)
  • Urgency and scarcity (imminent account suspension, deadlines, penalties)
  • Fear and loss aversion (threats of freezing, digital arrest, legal action)
Warning signs
  • Unsolicited urgent messages/calls claiming KYC is incomplete with threats of account/PAN/Aadhaar blocking
  • Links to non-official lookalike domains (e.g. .xyz, .com instead of RBI-mandated .bank.in)
  • Requests to share OTP, PIN, CVV, or upload Aadhaar/PAN/selfie for 'verification'
  • Instructions to install remote-access or 'verification' apps (AnyDesk, TeamViewer, fake loan apps)
  • Pressure to act immediately, join video calls, scan QR codes, or deposit cash to unusual channels

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.